OWASP ZAP

The OWASP Zed Attack Proxy (ZAP) is one of the world\'92s most popular free security tools and is actively maintained by hundreds of international volunteers. It can help you automatically find security vulnerabilities in your web applications while you are developing and testing your applications. It's also a great tool for experienced pentesters to use for manual security testing.